CVE-2007-1298

CVE-2007-1298 describes an SQL injection in subcat.php of AJ Auction 1.0, exploitable via the cate_id parameter. The root cause is improper handling of user input leading to arbitrary SQL execution on remote systems. The affected component is AJ Auction 1.0, specifically the subcat.php script; im...